Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
File: irW5qTaHl6hrrryB9iOz9OeG9Ro.mft (raw, json)
Hash identifier: Sd9vCOpk64EezL4xmF9z3MDtEjmhQGOL4HENGUazJl0=
Subject key identifier: 0F:A1:E5:7F:13:C4:A5:4B:D3:F5:12:53:91:A1:D7:BC:3C:8B:4A:69
Authority key identifier: 8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
Certificate issuer: /CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Certificate serial: 019768F31432B34B0B0D2696B9EC52E53D7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
Manifest number: 09E2
Signing time: Fri 13 Jun 2025 11:00:50 +0000
Manifest this update: Fri 13 Jun 2025 11:00:50 +0000
Manifest next update: Sat 14 Jun 2025 11:00:50 +0000
Files and hashes: 1: 8Ztwq8Ff-jJd_sBf28s8lvQ9SqU.roa (hash: QWa/HtnKYiYQsWevU25s3knaSRBSQ+SLuyEHZRqaj0Q=)
2: irW5qTaHl6hrrryB9iOz9OeG9Ro.crl (hash: lui6V0Fnl51Ie+wpa2NKrIGUPFPkYi63MW053v/67fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f3:14:32:b3:4b:0b:0d:26:96:b9:ec:52:e5:3d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Validity
Not Before: Jun 13 11:00:50 2025 GMT
Not After : Jun 14 11:00:50 2025 GMT
Subject: CN=0fa1e57f13c4a54bd3f5125391a1d7bc3c8b4a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:29:19:6e:1e:27:e9:0c:d5:29:58:8c:de:2a:
9e:5f:8f:22:80:5a:59:67:09:e2:11:3a:38:9f:03:
04:62:09:28:86:21:85:13:86:9a:07:66:6c:10:ae:
bf:e9:53:da:14:b6:19:6e:f1:15:cd:b4:cd:70:e2:
0d:7f:c5:45:70:6b:96:a2:6e:c7:a5:99:61:b9:6c:
10:cc:72:cf:5a:9c:a1:bf:ff:ca:d2:8f:7f:0b:c8:
f1:8c:66:fd:e9:72:87:d6:a2:87:95:d7:d4:e6:c4:
c7:fd:47:7f:06:79:8c:32:40:71:12:5b:97:40:f8:
fc:e5:3b:a8:5f:49:77:1a:c3:19:7a:42:cf:c2:17:
49:5f:de:b1:1c:b5:85:0f:22:56:0d:e4:cb:28:f8:
8b:68:e8:f8:f4:37:13:11:42:27:71:83:a5:1b:90:
90:0f:51:f2:be:30:a0:23:be:1c:be:76:1c:2d:05:
41:4f:80:8e:b0:a7:ea:fa:46:e8:e7:c1:84:cc:88:
d4:49:0d:04:8e:d2:20:a9:25:6f:f6:12:b8:4b:66:
42:5a:f0:31:e0:1d:5e:80:2d:e4:7e:c0:5f:e3:8d:
79:20:9a:86:a4:b5:99:83:76:f9:52:19:c3:ff:51:
ae:20:98:9b:f3:3f:b0:40:78:28:2b:39:20:b1:9b:
07:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A1:E5:7F:13:C4:A5:4B:D3:F5:12:53:91:A1:D7:BC:3C:8B:4A:69
X509v3 Authority Key Identifier:
keyid:8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:4e:12:f9:dd:d2:fa:8d:5b:4f:5a:19:54:9b:7d:79:6a:1b:
14:58:b5:2d:01:df:c2:a0:65:c5:1a:8c:03:1c:cc:cd:88:ff:
1f:27:f8:b8:87:97:2e:41:17:39:f0:c0:25:58:3d:62:49:24:
9a:ca:c0:40:e0:f8:75:76:ef:0d:18:44:4b:50:6c:b3:fe:2e:
5e:bd:cf:88:dc:66:f3:ae:23:01:79:8d:c1:98:d0:46:24:47:
e3:45:24:9f:33:08:5e:56:cb:38:fb:a5:64:7c:3f:ff:73:3e:
ee:8a:5b:f7:73:2b:f3:00:77:7c:7a:69:4d:7f:f2:e6:80:0a:
d4:3d:f1:81:9c:b5:7a:fb:9d:ad:61:37:28:30:7b:ce:0f:44:
e6:82:3a:2a:a4:9b:c8:7e:bb:3a:c7:a0:bc:c2:0c:da:c7:dc:
8a:b0:66:bb:d7:6c:d9:ff:a0:3f:93:c1:49:0a:15:c4:d5:f2:
22:94:6b:fc:6a:e6:f4:93:f2:a6:d5:f5:5d:f2:d9:40:b9:6a:
06:29:63:1f:3e:e0:d4:e6:10:4c:23:65:43:63:f4:ca:8f:60:
9b:25:41:6b:a6:1b:bb:30:58:04:ce:a7:98:4a:a5:c8:06:0d:
ca:bf:c8:18:ff:6d:b3:b0:2e:f7:bb:53:7c:a7:81:65:ec:68:
c9:b6:ef:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:45:43 2025 by rpki-client